@decaf-ts/integrations 0.3.5 → 0.3.7

package/lib/types/namespaces/services/authz.service.d.mts

@@ -0,0 +1,10 @@
+import { AuthzDataSources, CanAccessInput } from "../types.d.mts";
+export declare class AuthzService {
+    private readonly dataSources;
+    constructor(dataSources?: AuthzDataSources);
+    canAccess(input: CanAccessInput, ...args: any[]): Promise<boolean>;
+    requireAccess(input: CanAccessInput, ...args: any[]): Promise<void>;
+    buildAccessContext(tenantId: string, principalId: string, ...args: any[]): Promise<import("../types.d.mts").AccessContext>;
+    buildArangoContext(tenantId: string, principalId: string, permissionKey: string, ...args: any[]): Promise<import("..").ArangoAuthContext>;
+    buildQdrantFilter(tenantId: string, principalId: string, permissionKey: string, ...args: any[]): Promise<import("..").QdrantAuthFilter>;
+}

package/lib/types/namespaces/services/bootstrap.service.d.cts

@@ -0,0 +1,21 @@
+import type { BootstrapTemplate } from "../types.d.cts";
+export declare class BootstrapService {
+    private tenantService;
+    private tenantProfileService;
+    private orgUnitService;
+    private orgUnitProfileService;
+    private userService;
+    private membershipService;
+    private principalService;
+    private permissionService;
+    private roleService;
+    private rolePermissionService;
+    private roleAssignmentService;
+    private effectivePermissionService;
+    bootstrapTenantFromTemplate(template: BootstrapTemplate, ...args: any[]): Promise<{
+        tenantId: string;
+        rootOrgUnitId: string;
+        ownerUserId: string;
+        ownerPrincipalId: string;
+    }>;
+}

package/lib/types/namespaces/services/bootstrap.service.d.mts

@@ -0,0 +1,21 @@
+import type { BootstrapTemplate } from "../types.d.mts";
+export declare class BootstrapService {
+    private tenantService;
+    private tenantProfileService;
+    private orgUnitService;
+    private orgUnitProfileService;
+    private userService;
+    private membershipService;
+    private principalService;
+    private permissionService;
+    private roleService;
+    private rolePermissionService;
+    private roleAssignmentService;
+    private effectivePermissionService;
+    bootstrapTenantFromTemplate(template: BootstrapTemplate, ...args: any[]): Promise<{
+        tenantId: string;
+        rootOrgUnitId: string;
+        ownerUserId: string;
+        ownerPrincipalId: string;
+    }>;
+}

package/lib/types/namespaces/services/effective-permission.service.d.cts

@@ -0,0 +1,13 @@
+import { BaseModelService } from "../utils.d.cts";
+import { ScopeKind } from "../types.d.cts";
+import { EffectivePermission } from "../models/effective-permission.model.d.cts";
+export declare class EffectivePermissionService extends BaseModelService<EffectivePermission> {
+    constructor();
+    listForPrincipal(tenantId: string, principalId: string, ...args: any[]): Promise<EffectivePermission[]>;
+    listForScope(tenantId: string, scopeKind: ScopeKind, scopeId: string, ...args: any[]): Promise<EffectivePermission[]>;
+    hasPermission(tenantId: string, principalId: string, permissionKey: string, scopeKind: ScopeKind, scopeId: string, at?: Date, ...args: any[]): Promise<boolean>;
+    deleteForPrincipal(tenantId: string, principalId: string, ...args: any[]): Promise<void>;
+    deleteForTenant(tenantId: string, ...args: any[]): Promise<void>;
+    rebuildForPrincipal(tenantId: string, principalId: string, ...args: any[]): Promise<EffectivePermission[]>;
+    rebuildForTenant(tenantId: string, ...args: any[]): Promise<void>;
+}

package/lib/types/namespaces/services/effective-permission.service.d.mts

@@ -0,0 +1,13 @@
+import { BaseModelService } from "../utils.d.mts";
+import { ScopeKind } from "../types.d.mts";
+import { EffectivePermission } from "../models/effective-permission.model.d.mts";
+export declare class EffectivePermissionService extends BaseModelService<EffectivePermission> {
+    constructor();
+    listForPrincipal(tenantId: string, principalId: string, ...args: any[]): Promise<EffectivePermission[]>;
+    listForScope(tenantId: string, scopeKind: ScopeKind, scopeId: string, ...args: any[]): Promise<EffectivePermission[]>;
+    hasPermission(tenantId: string, principalId: string, permissionKey: string, scopeKind: ScopeKind, scopeId: string, at?: Date, ...args: any[]): Promise<boolean>;
+    deleteForPrincipal(tenantId: string, principalId: string, ...args: any[]): Promise<void>;
+    deleteForTenant(tenantId: string, ...args: any[]): Promise<void>;
+    rebuildForPrincipal(tenantId: string, principalId: string, ...args: any[]): Promise<EffectivePermission[]>;
+    rebuildForTenant(tenantId: string, ...args: any[]): Promise<void>;
+}

package/lib/types/namespaces/services/group-membership.service.d.cts

@@ -0,0 +1,10 @@
+import { BaseModelService } from "../utils.d.cts";
+import { GroupMembership } from "../models/group-membership.model.d.cts";
+export declare class GroupMembershipService extends BaseModelService<GroupMembership> {
+    constructor();
+    addPrincipalToGroup(tenantId: string, groupId: string, principalId: string, metadata?: Record<string, unknown>, ...args: any[]): Promise<GroupMembership>;
+    listGroupMembers(groupId: string, ...args: any[]): Promise<GroupMembership[]>;
+    listPrincipalGroups(principalId: string, ...args: any[]): Promise<GroupMembership[]>;
+    removePrincipalFromGroup(membershipId: string, ...args: any[]): Promise<void>;
+    resolveGroupPrincipalIdsForPrincipal(principalId: string, ...args: any[]): Promise<string[]>;
+}

package/lib/types/namespaces/services/group-membership.service.d.mts

@@ -0,0 +1,10 @@
+import { BaseModelService } from "../utils.d.mts";
+import { GroupMembership } from "../models/group-membership.model.d.mts";
+export declare class GroupMembershipService extends BaseModelService<GroupMembership> {
+    constructor();
+    addPrincipalToGroup(tenantId: string, groupId: string, principalId: string, metadata?: Record<string, unknown>, ...args: any[]): Promise<GroupMembership>;
+    listGroupMembers(groupId: string, ...args: any[]): Promise<GroupMembership[]>;
+    listPrincipalGroups(principalId: string, ...args: any[]): Promise<GroupMembership[]>;
+    removePrincipalFromGroup(membershipId: string, ...args: any[]): Promise<void>;
+    resolveGroupPrincipalIdsForPrincipal(principalId: string, ...args: any[]): Promise<string[]>;
+}

package/lib/types/namespaces/services/group.service.d.cts

@@ -0,0 +1,9 @@
+import { BaseModelService } from "../utils.d.cts";
+import { Group } from "../models/group.model.d.cts";
+export declare class GroupService extends BaseModelService<Group> {
+    constructor();
+    createGroup(tenantId: string, name: string, orgUnitId?: string, metadata?: Record<string, unknown>, ...args: any[]): Promise<Group>;
+    renameGroup(groupId: string, name: string, ...args: any[]): Promise<Group>;
+    moveGroupToOrgUnit(groupId: string, orgUnitId: string | undefined, ...args: any[]): Promise<Group>;
+    listTenantGroups(tenantId: string, ...args: any[]): Promise<Group[]>;
+}

package/lib/types/namespaces/services/group.service.d.mts

@@ -0,0 +1,9 @@
+import { BaseModelService } from "../utils.d.mts";
+import { Group } from "../models/group.model.d.mts";
+export declare class GroupService extends BaseModelService<Group> {
+    constructor();
+    createGroup(tenantId: string, name: string, orgUnitId?: string, metadata?: Record<string, unknown>, ...args: any[]): Promise<Group>;
+    renameGroup(groupId: string, name: string, ...args: any[]): Promise<Group>;
+    moveGroupToOrgUnit(groupId: string, orgUnitId: string | undefined, ...args: any[]): Promise<Group>;
+    listTenantGroups(tenantId: string, ...args: any[]): Promise<Group[]>;
+}

package/lib/types/namespaces/services/index.d.cts

@@ -0,0 +1,24 @@
+export * from "./tenant-profile.service.d.cts";
+export * from "./org-unit-profile.service.d.cts";
+export * from "./org-unit-closure.service.d.cts";
+export * from "./inheritance-block.service.d.cts";
+export * from "./tenant.service.d.cts";
+export * from "./org-unit.service.d.cts";
+export * from "./user.service.d.cts";
+export * from "./principal.service.d.cts";
+export * from "./tenant-membership.service.d.cts";
+export * from "./org-unit-membership.service.d.cts";
+export * from "./group.service.d.cts";
+export * from "./group-membership.service.d.cts";
+export * from "./permission.service.d.cts";
+export * from "./role.service.d.cts";
+export * from "./role-permission.service.d.cts";
+export * from "./role-assignment.service.d.cts";
+export * from "./effective-permission.service.d.cts";
+export * from "./protected-resource.service.d.cts";
+export * from "./resource-grant.service.d.cts";
+export * from "./resource-lifecycle.service.d.cts";
+export * from "./storage-binding.service.d.cts";
+export * from "./bootstrap.service.d.cts";
+export * from "./system-management.service.d.cts";
+export * from "./authz.service.d.cts";

package/lib/types/namespaces/services/index.d.mts

@@ -0,0 +1,24 @@
+export * from "./tenant-profile.service.d.mts";
+export * from "./org-unit-profile.service.d.mts";
+export * from "./org-unit-closure.service.d.mts";
+export * from "./inheritance-block.service.d.mts";
+export * from "./tenant.service.d.mts";
+export * from "./org-unit.service.d.mts";
+export * from "./user.service.d.mts";
+export * from "./principal.service.d.mts";
+export * from "./tenant-membership.service.d.mts";
+export * from "./org-unit-membership.service.d.mts";
+export * from "./group.service.d.mts";
+export * from "./group-membership.service.d.mts";
+export * from "./permission.service.d.mts";
+export * from "./role.service.d.mts";
+export * from "./role-permission.service.d.mts";
+export * from "./role-assignment.service.d.mts";
+export * from "./effective-permission.service.d.mts";
+export * from "./protected-resource.service.d.mts";
+export * from "./resource-grant.service.d.mts";
+export * from "./resource-lifecycle.service.d.mts";
+export * from "./storage-binding.service.d.mts";
+export * from "./bootstrap.service.d.mts";
+export * from "./system-management.service.d.mts";
+export * from "./authz.service.d.mts";

package/lib/types/namespaces/services/inheritance-block.service.d.cts

@@ -0,0 +1,10 @@
+import { BaseModelService } from "../utils.d.cts";
+import { PermissionCategory } from "../types.d.cts";
+import { InheritanceBlock } from "../models/inheritance-block.model.d.cts";
+export declare class InheritanceBlockService extends BaseModelService<InheritanceBlock> {
+    constructor();
+    blockCategory(tenantId: string, orgUnitId: string, permissionCategory: PermissionCategory, blockedFromAncestorId?: string, reason?: string, ...args: any[]): Promise<InheritanceBlock>;
+    unblockCategory(blockId: string, ...args: any[]): Promise<void>;
+    listForOrgUnit(tenantId: string, orgUnitId: string, ...args: any[]): Promise<InheritanceBlock[]>;
+    categoryBlockedForAncestor(tenantId: string, orgUnitId: string, ancestorOrgUnitId: string, category: PermissionCategory, ...args: any[]): Promise<boolean>;
+}

package/lib/types/namespaces/services/inheritance-block.service.d.mts

@@ -0,0 +1,10 @@
+import { BaseModelService } from "../utils.d.mts";
+import { PermissionCategory } from "../types.d.mts";
+import { InheritanceBlock } from "../models/inheritance-block.model.d.mts";
+export declare class InheritanceBlockService extends BaseModelService<InheritanceBlock> {
+    constructor();
+    blockCategory(tenantId: string, orgUnitId: string, permissionCategory: PermissionCategory, blockedFromAncestorId?: string, reason?: string, ...args: any[]): Promise<InheritanceBlock>;
+    unblockCategory(blockId: string, ...args: any[]): Promise<void>;
+    listForOrgUnit(tenantId: string, orgUnitId: string, ...args: any[]): Promise<InheritanceBlock[]>;
+    categoryBlockedForAncestor(tenantId: string, orgUnitId: string, ancestorOrgUnitId: string, category: PermissionCategory, ...args: any[]): Promise<boolean>;
+}

package/lib/types/namespaces/services/org-unit-closure.service.d.cts

@@ -0,0 +1,11 @@
+import { BaseModelService } from "../utils.d.cts";
+import { OrgUnitClosure } from "../models/org-unit-closure.model.d.cts";
+export declare class OrgUnitClosureService extends BaseModelService<OrgUnitClosure> {
+    constructor();
+    listAncestors(tenantId: string, orgUnitId: string, ...args: any[]): Promise<OrgUnitClosure[]>;
+    listDescendants(tenantId: string, orgUnitId: string, ...args: any[]): Promise<OrgUnitClosure[]>;
+    isAncestorOf(tenantId: string, ancestorOrgUnitId: string, descendantOrgUnitId: string, ...args: any[]): Promise<boolean>;
+    createSelfLink(tenantId: string, orgUnitId: string, ...args: any[]): Promise<OrgUnitClosure>;
+    insertAncestorLinksForNewChild(tenantId: string, parentOrgUnitId: string, childOrgUnitId: string, ...args: any[]): Promise<void>;
+    deleteLinksForSubtree(tenantId: string, orgUnitId: string, ...args: any[]): Promise<void>;
+}

package/lib/types/namespaces/services/org-unit-closure.service.d.mts

@@ -0,0 +1,11 @@
+import { BaseModelService } from "../utils.d.mts";
+import { OrgUnitClosure } from "../models/org-unit-closure.model.d.mts";
+export declare class OrgUnitClosureService extends BaseModelService<OrgUnitClosure> {
+    constructor();
+    listAncestors(tenantId: string, orgUnitId: string, ...args: any[]): Promise<OrgUnitClosure[]>;
+    listDescendants(tenantId: string, orgUnitId: string, ...args: any[]): Promise<OrgUnitClosure[]>;
+    isAncestorOf(tenantId: string, ancestorOrgUnitId: string, descendantOrgUnitId: string, ...args: any[]): Promise<boolean>;
+    createSelfLink(tenantId: string, orgUnitId: string, ...args: any[]): Promise<OrgUnitClosure>;
+    insertAncestorLinksForNewChild(tenantId: string, parentOrgUnitId: string, childOrgUnitId: string, ...args: any[]): Promise<void>;
+    deleteLinksForSubtree(tenantId: string, orgUnitId: string, ...args: any[]): Promise<void>;
+}

package/lib/types/namespaces/services/org-unit-membership.service.d.cts

@@ -0,0 +1,11 @@
+import { BaseModelService } from "../utils.d.cts";
+import { MembershipStatus } from "../types.d.cts";
+import { OrgUnitMembership } from "../models/org-unit-membership.model.d.cts";
+export declare class OrgUnitMembershipService extends BaseModelService<OrgUnitMembership> {
+    constructor();
+    addUserToOrgUnit(tenantId: string, orgUnitId: string, userId: string, status?: MembershipStatus, ...args: any[]): Promise<OrgUnitMembership>;
+    setStatus(membershipId: string, status: MembershipStatus, ...args: any[]): Promise<OrgUnitMembership>;
+    listUserOrgUnits(userId: string, ...args: any[]): Promise<OrgUnitMembership[]>;
+    listOrgUnitUsers(orgUnitId: string, ...args: any[]): Promise<OrgUnitMembership[]>;
+    removeUserFromOrgUnit(membershipId: string, ...args: any[]): Promise<void>;
+}

package/lib/types/namespaces/services/org-unit-membership.service.d.mts

@@ -0,0 +1,11 @@
+import { BaseModelService } from "../utils.d.mts";
+import { MembershipStatus } from "../types.d.mts";
+import { OrgUnitMembership } from "../models/org-unit-membership.model.d.mts";
+export declare class OrgUnitMembershipService extends BaseModelService<OrgUnitMembership> {
+    constructor();
+    addUserToOrgUnit(tenantId: string, orgUnitId: string, userId: string, status?: MembershipStatus, ...args: any[]): Promise<OrgUnitMembership>;
+    setStatus(membershipId: string, status: MembershipStatus, ...args: any[]): Promise<OrgUnitMembership>;
+    listUserOrgUnits(userId: string, ...args: any[]): Promise<OrgUnitMembership[]>;
+    listOrgUnitUsers(orgUnitId: string, ...args: any[]): Promise<OrgUnitMembership[]>;
+    removeUserFromOrgUnit(membershipId: string, ...args: any[]): Promise<void>;
+}

package/lib/types/namespaces/services/org-unit-profile.service.d.cts

@@ -0,0 +1,7 @@
+import { BaseModelService } from "../utils.d.cts";
+import { OrgUnitProfile } from "../models/org-unit-profile.model.d.cts";
+export declare class OrgUnitProfileService extends BaseModelService<OrgUnitProfile> {
+    constructor();
+    createProfile(orgUnitId: string, profileKey: string, metadata?: Record<string, unknown>, ...args: any[]): Promise<OrgUnitProfile>;
+    listForOrgUnit(orgUnitId: string, ...args: any[]): Promise<OrgUnitProfile[]>;
+}

package/lib/types/namespaces/services/org-unit-profile.service.d.mts

@@ -0,0 +1,7 @@
+import { BaseModelService } from "../utils.d.mts";
+import { OrgUnitProfile } from "../models/org-unit-profile.model.d.mts";
+export declare class OrgUnitProfileService extends BaseModelService<OrgUnitProfile> {
+    constructor();
+    createProfile(orgUnitId: string, profileKey: string, metadata?: Record<string, unknown>, ...args: any[]): Promise<OrgUnitProfile>;
+    listForOrgUnit(orgUnitId: string, ...args: any[]): Promise<OrgUnitProfile[]>;
+}

package/lib/types/namespaces/services/org-unit.service.d.cts

@@ -0,0 +1,18 @@
+import { BaseModelService } from "../utils.d.cts";
+import type { CreateOrgUnitInput } from "../types.d.cts";
+import { OrgUnit } from "../models/org-unit.model.d.cts";
+export declare class OrgUnitService extends BaseModelService<OrgUnit> {
+    constructor();
+    private orgUnitPath;
+    private createProfileIfNeeded;
+    createRoot(tenantId: string, name: string, metadata?: Record<string, unknown>, profileKey?: string, profileMetadata?: Record<string, unknown>, ...args: any[]): Promise<OrgUnit>;
+    createChild(input: CreateOrgUnitInput, ...args: any[]): Promise<OrgUnit>;
+    listChildren(parentOrgUnitId: string, ...args: any[]): Promise<OrgUnit[]>;
+    listTenantOrgUnits(tenantId: string, ...args: any[]): Promise<OrgUnit[]>;
+    listDescendantOrgUnits(tenantId: string, orgUnitId: string, includeSelf?: boolean, ...args: any[]): Promise<OrgUnit[]>;
+    listAncestorOrgUnits(tenantId: string, orgUnitId: string, includeSelf?: boolean, ...args: any[]): Promise<OrgUnit[]>;
+    renameOrgUnit(orgUnitId: string, name: string, ...args: any[]): Promise<OrgUnit>;
+    moveOrgUnit(tenantId: string, orgUnitId: string, newParentOrgUnitId: string, ...args: any[]): Promise<OrgUnit>;
+    rebuildTenantClosure(tenantId: string, ...args: any[]): Promise<void>;
+    deleteOrgUnitTree(tenantId: string, orgUnitId: string, ...args: any[]): Promise<void>;
+}

package/lib/types/namespaces/services/org-unit.service.d.mts

@@ -0,0 +1,18 @@
+import { BaseModelService } from "../utils.d.mts";
+import type { CreateOrgUnitInput } from "../types.d.mts";
+import { OrgUnit } from "../models/org-unit.model.d.mts";
+export declare class OrgUnitService extends BaseModelService<OrgUnit> {
+    constructor();
+    private orgUnitPath;
+    private createProfileIfNeeded;
+    createRoot(tenantId: string, name: string, metadata?: Record<string, unknown>, profileKey?: string, profileMetadata?: Record<string, unknown>, ...args: any[]): Promise<OrgUnit>;
+    createChild(input: CreateOrgUnitInput, ...args: any[]): Promise<OrgUnit>;
+    listChildren(parentOrgUnitId: string, ...args: any[]): Promise<OrgUnit[]>;
+    listTenantOrgUnits(tenantId: string, ...args: any[]): Promise<OrgUnit[]>;
+    listDescendantOrgUnits(tenantId: string, orgUnitId: string, includeSelf?: boolean, ...args: any[]): Promise<OrgUnit[]>;
+    listAncestorOrgUnits(tenantId: string, orgUnitId: string, includeSelf?: boolean, ...args: any[]): Promise<OrgUnit[]>;
+    renameOrgUnit(orgUnitId: string, name: string, ...args: any[]): Promise<OrgUnit>;
+    moveOrgUnit(tenantId: string, orgUnitId: string, newParentOrgUnitId: string, ...args: any[]): Promise<OrgUnit>;
+    rebuildTenantClosure(tenantId: string, ...args: any[]): Promise<void>;
+    deleteOrgUnitTree(tenantId: string, orgUnitId: string, ...args: any[]): Promise<void>;
+}

package/lib/types/namespaces/services/permission.service.d.cts

@@ -0,0 +1,10 @@
+import { BaseModelService } from "../utils.d.cts";
+import { PermissionCategory, CreatePermissionInput } from "../types.d.cts";
+import { Permission } from "../models/permission.model.d.cts";
+export declare class PermissionService extends BaseModelService<Permission> {
+    constructor();
+    createPermission(input: CreatePermissionInput, ...args: any[]): Promise<Permission>;
+    getByKey(key: string, ...args: any[]): Promise<Permission>;
+    listByCategory(category: PermissionCategory, ...args: any[]): Promise<Permission[]>;
+    updateDescription(permissionId: string, description: string | undefined, ...args: any[]): Promise<Permission>;
+}

package/lib/types/namespaces/services/permission.service.d.mts

@@ -0,0 +1,10 @@
+import { BaseModelService } from "../utils.d.mts";
+import { PermissionCategory, CreatePermissionInput } from "../types.d.mts";
+import { Permission } from "../models/permission.model.d.mts";
+export declare class PermissionService extends BaseModelService<Permission> {
+    constructor();
+    createPermission(input: CreatePermissionInput, ...args: any[]): Promise<Permission>;
+    getByKey(key: string, ...args: any[]): Promise<Permission>;
+    listByCategory(category: PermissionCategory, ...args: any[]): Promise<Permission[]>;
+    updateDescription(permissionId: string, description: string | undefined, ...args: any[]): Promise<Permission>;
+}

package/lib/types/namespaces/services/principal.service.d.cts

@@ -0,0 +1,11 @@
+import { BaseModelService } from "../utils.d.cts";
+import { PrincipalKind } from "../types.d.cts";
+import { Principal } from "../models/principal.model.d.cts";
+export declare class PrincipalService extends BaseModelService<Principal> {
+    constructor();
+    createPrincipal(tenantId: string, kind: PrincipalKind, subjectId: string, ...args: any[]): Promise<Principal>;
+    getForSubject(tenantId: string, kind: PrincipalKind, subjectId: string, ...args: any[]): Promise<Principal | undefined>;
+    getOrCreateForSubject(tenantId: string, kind: PrincipalKind, subjectId: string, ...args: any[]): Promise<Principal>;
+    getUserPrincipal(tenantId: string, userId: string, ...args: any[]): Promise<Principal>;
+    getGroupPrincipal(tenantId: string, groupId: string, ...args: any[]): Promise<Principal>;
+}

package/lib/types/namespaces/services/principal.service.d.mts

@@ -0,0 +1,11 @@
+import { BaseModelService } from "../utils.d.mts";
+import { PrincipalKind } from "../types.d.mts";
+import { Principal } from "../models/principal.model.d.mts";
+export declare class PrincipalService extends BaseModelService<Principal> {
+    constructor();
+    createPrincipal(tenantId: string, kind: PrincipalKind, subjectId: string, ...args: any[]): Promise<Principal>;
+    getForSubject(tenantId: string, kind: PrincipalKind, subjectId: string, ...args: any[]): Promise<Principal | undefined>;
+    getOrCreateForSubject(tenantId: string, kind: PrincipalKind, subjectId: string, ...args: any[]): Promise<Principal>;
+    getUserPrincipal(tenantId: string, userId: string, ...args: any[]): Promise<Principal>;
+    getGroupPrincipal(tenantId: string, groupId: string, ...args: any[]): Promise<Principal>;
+}

package/lib/types/namespaces/services/protected-resource.service.d.cts

@@ -0,0 +1,13 @@
+import { BaseModelService } from "../utils.d.cts";
+import { RegisterResourceInput, ResourceVisibility } from "../types.d.cts";
+import { ProtectedResource } from "../models/protected-resource.model.d.cts";
+export declare class ProtectedResourceService extends BaseModelService<ProtectedResource> {
+    constructor();
+    registerResource(input: RegisterResourceInput, ...args: any[]): Promise<ProtectedResource>;
+    getByDomainResource(tenantId: string, resourceType: string, resourceId: string, ...args: any[]): Promise<ProtectedResource | undefined>;
+    moveResourceToOrgUnit(protectedResourceId: string, orgUnitId: string, ...args: any[]): Promise<ProtectedResource>;
+    setVisibility(protectedResourceId: string, visibility: ResourceVisibility, ...args: any[]): Promise<ProtectedResource>;
+    transferOwnership(protectedResourceId: string, ownerPrincipalId: string | undefined, ...args: any[]): Promise<ProtectedResource>;
+    listOrgUnitResources(orgUnitId: string, ...args: any[]): Promise<ProtectedResource[]>;
+    listTenantResources(tenantId: string, ...args: any[]): Promise<ProtectedResource[]>;
+}

package/lib/types/namespaces/services/protected-resource.service.d.mts

@@ -0,0 +1,13 @@
+import { BaseModelService } from "../utils.d.mts";
+import { RegisterResourceInput, ResourceVisibility } from "../types.d.mts";
+import { ProtectedResource } from "../models/protected-resource.model.d.mts";
+export declare class ProtectedResourceService extends BaseModelService<ProtectedResource> {
+    constructor();
+    registerResource(input: RegisterResourceInput, ...args: any[]): Promise<ProtectedResource>;
+    getByDomainResource(tenantId: string, resourceType: string, resourceId: string, ...args: any[]): Promise<ProtectedResource | undefined>;
+    moveResourceToOrgUnit(protectedResourceId: string, orgUnitId: string, ...args: any[]): Promise<ProtectedResource>;
+    setVisibility(protectedResourceId: string, visibility: ResourceVisibility, ...args: any[]): Promise<ProtectedResource>;
+    transferOwnership(protectedResourceId: string, ownerPrincipalId: string | undefined, ...args: any[]): Promise<ProtectedResource>;
+    listOrgUnitResources(orgUnitId: string, ...args: any[]): Promise<ProtectedResource[]>;
+    listTenantResources(tenantId: string, ...args: any[]): Promise<ProtectedResource[]>;
+}

package/lib/types/namespaces/services/resource-grant.service.d.cts

@@ -0,0 +1,12 @@
+import { BaseModelService } from "../utils.d.cts";
+import { GrantResourceInput } from "../types.d.cts";
+import { ResourceGrant } from "../models/resource-grant.model.d.cts";
+export declare class ResourceGrantService extends BaseModelService<ResourceGrant> {
+    constructor();
+    grantResource(input: GrantResourceInput, ...args: any[]): Promise<ResourceGrant>;
+    revokeGrant(grantId: string, ...args: any[]): Promise<void>;
+    listResourceGrants(protectedResourceId: string, ...args: any[]): Promise<ResourceGrant[]>;
+    listPrincipalGrants(tenantId: string, principalId: string, ...args: any[]): Promise<ResourceGrant[]>;
+    hasGrant(tenantId: string, principalId: string, protectedResourceId: string, permissionKey: string, at?: Date, ...args: any[]): Promise<boolean>;
+    deleteAllForResource(protectedResourceId: string, ...args: any[]): Promise<void>;
+}

package/lib/types/namespaces/services/resource-grant.service.d.mts

@@ -0,0 +1,12 @@
+import { BaseModelService } from "../utils.d.mts";
+import { GrantResourceInput } from "../types.d.mts";
+import { ResourceGrant } from "../models/resource-grant.model.d.mts";
+export declare class ResourceGrantService extends BaseModelService<ResourceGrant> {
+    constructor();
+    grantResource(input: GrantResourceInput, ...args: any[]): Promise<ResourceGrant>;
+    revokeGrant(grantId: string, ...args: any[]): Promise<void>;
+    listResourceGrants(protectedResourceId: string, ...args: any[]): Promise<ResourceGrant[]>;
+    listPrincipalGrants(tenantId: string, principalId: string, ...args: any[]): Promise<ResourceGrant[]>;
+    hasGrant(tenantId: string, principalId: string, protectedResourceId: string, permissionKey: string, at?: Date, ...args: any[]): Promise<boolean>;
+    deleteAllForResource(protectedResourceId: string, ...args: any[]): Promise<void>;
+}

package/lib/types/namespaces/services/resource-lifecycle.service.d.cts

@@ -0,0 +1,10 @@
+import { ResourceVisibility } from "../types.d.cts";
+export declare class ResourceLifecycleService {
+    unregisterResource(protectedResourceId: string, ...args: any[]): Promise<void>;
+    resolveResourceScope(protectedResourceId: string, ...args: any[]): Promise<{
+        tenantId: string;
+        orgUnitId: string;
+        visibility: ResourceVisibility;
+        ownerPrincipalId?: string;
+    }>;
+}

package/lib/types/namespaces/services/resource-lifecycle.service.d.mts

@@ -0,0 +1,10 @@
+import { ResourceVisibility } from "../types.d.mts";
+export declare class ResourceLifecycleService {
+    unregisterResource(protectedResourceId: string, ...args: any[]): Promise<void>;
+    resolveResourceScope(protectedResourceId: string, ...args: any[]): Promise<{
+        tenantId: string;
+        orgUnitId: string;
+        visibility: ResourceVisibility;
+        ownerPrincipalId?: string;
+    }>;
+}

package/lib/types/namespaces/services/role-assignment.service.d.cts

@@ -0,0 +1,12 @@
+import { BaseModelService } from "../utils.d.cts";
+import { AssignRoleInput } from "../types.d.cts";
+import { RoleAssignment } from "../models/role-assignment.model.d.cts";
+export declare class RoleAssignmentService extends BaseModelService<RoleAssignment> {
+    constructor();
+    assignRole(input: AssignRoleInput, ...args: any[]): Promise<RoleAssignment>;
+    revokeAssignment(assignmentId: string, ...args: any[]): Promise<void>;
+    listPrincipalAssignments(tenantId: string, principalId: string, ...args: any[]): Promise<RoleAssignment[]>;
+    listRoleAssignments(roleId: string, ...args: any[]): Promise<RoleAssignment[]>;
+    listTenantAssignments(tenantId: string, ...args: any[]): Promise<RoleAssignment[]>;
+    updateAssignmentWindow(assignmentId: string, startsAt: Date | undefined, expiresAt: Date | undefined, ...args: any[]): Promise<RoleAssignment>;
+}

package/lib/types/namespaces/services/role-assignment.service.d.mts

@@ -0,0 +1,12 @@
+import { BaseModelService } from "../utils.d.mts";
+import { AssignRoleInput } from "../types.d.mts";
+import { RoleAssignment } from "../models/role-assignment.model.d.mts";
+export declare class RoleAssignmentService extends BaseModelService<RoleAssignment> {
+    constructor();
+    assignRole(input: AssignRoleInput, ...args: any[]): Promise<RoleAssignment>;
+    revokeAssignment(assignmentId: string, ...args: any[]): Promise<void>;
+    listPrincipalAssignments(tenantId: string, principalId: string, ...args: any[]): Promise<RoleAssignment[]>;
+    listRoleAssignments(roleId: string, ...args: any[]): Promise<RoleAssignment[]>;
+    listTenantAssignments(tenantId: string, ...args: any[]): Promise<RoleAssignment[]>;
+    updateAssignmentWindow(assignmentId: string, startsAt: Date | undefined, expiresAt: Date | undefined, ...args: any[]): Promise<RoleAssignment>;
+}

package/lib/types/namespaces/services/role-permission.service.d.cts

@@ -0,0 +1,12 @@
+import { BaseModelService } from "../utils.d.cts";
+import { RolePermission } from "../models/role-permission.model.d.cts";
+export declare class RolePermissionService extends BaseModelService<RolePermission> {
+    constructor();
+    addPermissionToRole(roleId: string, permissionId: string, ...args: any[]): Promise<RolePermission>;
+    addPermissionKeyToRole(roleId: string, permissionKey: string, ...args: any[]): Promise<RolePermission>;
+    removePermissionFromRole(rolePermissionId: string, ...args: any[]): Promise<void>;
+    listRolePermissions(roleId: string, ...args: any[]): Promise<RolePermission[]>;
+    listPermissionRoles(permissionId: string, ...args: any[]): Promise<RolePermission[]>;
+    replaceRolePermissions(roleId: string, permissionIds: string[], ...args: any[]): Promise<RolePermission[]>;
+    createRoleWithPermissions(input: import("../types.d.cts").CreateRoleInput, permissionKeys: string[], ...args: any[]): Promise<import("../models/role.model.d.cts").Role>;
+}

package/lib/types/namespaces/services/role-permission.service.d.mts

@@ -0,0 +1,12 @@
+import { BaseModelService } from "../utils.d.mts";
+import { RolePermission } from "../models/role-permission.model.d.mts";
+export declare class RolePermissionService extends BaseModelService<RolePermission> {
+    constructor();
+    addPermissionToRole(roleId: string, permissionId: string, ...args: any[]): Promise<RolePermission>;
+    addPermissionKeyToRole(roleId: string, permissionKey: string, ...args: any[]): Promise<RolePermission>;
+    removePermissionFromRole(rolePermissionId: string, ...args: any[]): Promise<void>;
+    listRolePermissions(roleId: string, ...args: any[]): Promise<RolePermission[]>;
+    listPermissionRoles(permissionId: string, ...args: any[]): Promise<RolePermission[]>;
+    replaceRolePermissions(roleId: string, permissionIds: string[], ...args: any[]): Promise<RolePermission[]>;
+    createRoleWithPermissions(input: import("../types.d.mts").CreateRoleInput, permissionKeys: string[], ...args: any[]): Promise<import("../models/role.model.d.mts").Role>;
+}

package/lib/types/namespaces/services/role.service.d.cts

@@ -0,0 +1,12 @@
+import { BaseModelService } from "../utils.d.cts";
+import { CreateRoleInput } from "../types.d.cts";
+import { Role } from "../models/role.model.d.cts";
+export declare class RoleService extends BaseModelService<Role> {
+    constructor();
+    createRole(input: CreateRoleInput, ...args: any[]): Promise<Role>;
+    getSystemRoleByKey(key: string, ...args: any[]): Promise<Role>;
+    getTenantRoleByKey(tenantId: string, key: string, ...args: any[]): Promise<Role>;
+    renameRole(roleId: string, name: string, ...args: any[]): Promise<Role>;
+    updateRoleMetadata(roleId: string, metadata: Record<string, unknown> | undefined, ...args: any[]): Promise<Role>;
+    listTenantRoles(tenantId: string, includeSystem?: boolean, ...args: any[]): Promise<Role[]>;
+}

package/lib/types/namespaces/services/role.service.d.mts

@@ -0,0 +1,12 @@
+import { BaseModelService } from "../utils.d.mts";
+import { CreateRoleInput } from "../types.d.mts";
+import { Role } from "../models/role.model.d.mts";
+export declare class RoleService extends BaseModelService<Role> {
+    constructor();
+    createRole(input: CreateRoleInput, ...args: any[]): Promise<Role>;
+    getSystemRoleByKey(key: string, ...args: any[]): Promise<Role>;
+    getTenantRoleByKey(tenantId: string, key: string, ...args: any[]): Promise<Role>;
+    renameRole(roleId: string, name: string, ...args: any[]): Promise<Role>;
+    updateRoleMetadata(roleId: string, metadata: Record<string, unknown> | undefined, ...args: any[]): Promise<Role>;
+    listTenantRoles(tenantId: string, includeSystem?: boolean, ...args: any[]): Promise<Role[]>;
+}

package/lib/types/namespaces/services/storage-binding.service.d.cts

@@ -0,0 +1,12 @@
+import { BaseModelService } from "../utils.d.cts";
+import { CreateStorageBindingInput, StorageKind } from "../types.d.cts";
+import { StorageBinding } from "../models/storage-binding.model.d.cts";
+export declare class StorageBindingService extends BaseModelService<StorageBinding> {
+    constructor();
+    createBinding(input: CreateStorageBindingInput, ...args: any[]): Promise<StorageBinding>;
+    listTenantBindings(tenantId: string, ...args: any[]): Promise<StorageBinding[]>;
+    getBinding(tenantId: string, storageKind: StorageKind, ...args: any[]): Promise<StorageBinding | undefined>;
+    setBindingConfig(bindingId: string, config: Record<string, unknown> | undefined, ...args: any[]): Promise<StorageBinding>;
+    promoteToDedicated(bindingId: string, bindingKey: string, region: string, config?: Record<string, unknown>, ...args: any[]): Promise<StorageBinding>;
+    setShared(bindingId: string, bindingKey: string, region: string, config?: Record<string, unknown>, ...args: any[]): Promise<StorageBinding>;
+}

package/lib/types/namespaces/services/storage-binding.service.d.mts

@@ -0,0 +1,12 @@
+import { BaseModelService } from "../utils.d.mts";
+import { CreateStorageBindingInput, StorageKind } from "../types.d.mts";
+import { StorageBinding } from "../models/storage-binding.model.d.mts";
+export declare class StorageBindingService extends BaseModelService<StorageBinding> {
+    constructor();
+    createBinding(input: CreateStorageBindingInput, ...args: any[]): Promise<StorageBinding>;
+    listTenantBindings(tenantId: string, ...args: any[]): Promise<StorageBinding[]>;
+    getBinding(tenantId: string, storageKind: StorageKind, ...args: any[]): Promise<StorageBinding | undefined>;
+    setBindingConfig(bindingId: string, config: Record<string, unknown> | undefined, ...args: any[]): Promise<StorageBinding>;
+    promoteToDedicated(bindingId: string, bindingKey: string, region: string, config?: Record<string, unknown>, ...args: any[]): Promise<StorageBinding>;
+    setShared(bindingId: string, bindingKey: string, region: string, config?: Record<string, unknown>, ...args: any[]): Promise<StorageBinding>;
+}

package/lib/types/namespaces/services/system-management.service.d.cts

@@ -0,0 +1,14 @@
+export declare class SystemManagementService {
+    private membershipService;
+    private orgMembershipService;
+    private principalService;
+    private roleService;
+    private roleAssignmentService;
+    private effectivePermissionService;
+    onboardUserToTenantAndOrgUnit(tenantId: string, userId: string, orgUnitId: string, roleKey: string, ...args: any[]): Promise<{
+        principalId: string;
+    }>;
+    changeUserOrgRole(tenantId: string, principalId: string, orgUnitId: string, roleKey: string, inheritDown: boolean, ...args: any[]): Promise<void>;
+    suspendUserInTenant(tenantMembershipId: string, tenantId: string, principalId: string, ...args: any[]): Promise<void>;
+    reactivateUserInTenant(tenantMembershipId: string, tenantId: string, principalId: string, ...args: any[]): Promise<void>;
+}

package/lib/types/namespaces/services/system-management.service.d.mts

@@ -0,0 +1,14 @@
+export declare class SystemManagementService {
+    private membershipService;
+    private orgMembershipService;
+    private principalService;
+    private roleService;
+    private roleAssignmentService;
+    private effectivePermissionService;
+    onboardUserToTenantAndOrgUnit(tenantId: string, userId: string, orgUnitId: string, roleKey: string, ...args: any[]): Promise<{
+        principalId: string;
+    }>;
+    changeUserOrgRole(tenantId: string, principalId: string, orgUnitId: string, roleKey: string, inheritDown: boolean, ...args: any[]): Promise<void>;
+    suspendUserInTenant(tenantMembershipId: string, tenantId: string, principalId: string, ...args: any[]): Promise<void>;
+    reactivateUserInTenant(tenantMembershipId: string, tenantId: string, principalId: string, ...args: any[]): Promise<void>;
+}

package/lib/types/namespaces/services/tenant-membership.service.d.cts

@@ -0,0 +1,11 @@
+import { BaseModelService } from "../utils.d.cts";
+import { MembershipStatus } from "../types.d.cts";
+import { TenantMembership } from "../models/tenant-membership.model.d.cts";
+export declare class TenantMembershipService extends BaseModelService<TenantMembership> {
+    constructor();
+    addUserToTenant(tenantId: string, userId: string, status?: MembershipStatus, ...args: any[]): Promise<TenantMembership>;
+    setStatus(membershipId: string, status: MembershipStatus, ...args: any[]): Promise<TenantMembership>;
+    listUserTenants(userId: string, ...args: any[]): Promise<TenantMembership[]>;
+    listTenantUsers(tenantId: string, ...args: any[]): Promise<TenantMembership[]>;
+    removeUserFromTenant(membershipId: string, ...args: any[]): Promise<void>;
+}